Remote Director, Information Security GRC & Compliance

NEPSE Trading; Galveston (TX); Hybrid; USD 180,000 - 230,000; Full time

Benefits offered by this job

401(k) plan

Health & dental plan

Holiday & vacation pay

Employee Assistance Program

Job summary

Gulf Copper LLC, a leader in marine repair and construction, seeks a Director of Information Security Governance, Risk and Compliance. You will guide cyber risk management, policy development and assurance programs while coordinating with Legal, Quality, and Operations.

The role requires deep knowledge of NIST, DFARS, ITAR, and ISO 27001, with a track record of influencing leadership and driving compliance across multiple functions. Remote work is available in some capacities.

Qualifications

• Bachelor’s degree in information security, cybersecurity, risk management or related field; equivalent experience considered.
• At least 10 years in information security governance, risk, compliance or assurance with leadership experience.
• Strong knowledge of NIST CSF, NIST SP 800-171, CMMC, DFARS, CIS Controls, ISO/IEC 27001.

Responsibilities

• Advise the CISO and executives on material cyber risk and compliance.
• Lead the GRC program and align with enterprise risk management processes.
• Develop and govern information security policies, standards and controls.
• Coordinate external audits, regulatory examinations and customer reviews.

Skills

GRC leadership

Risk management

Policy development

Executive communication

Education

Bachelor's in information security or related

Master's preferred

Tools

NIST CSF

CMMC / DFARS compliance

ISO 27001

Job description

Gulf Copper LLC, a leader in marine repair and construction, seeks a Director of Information Security Governance, Risk and Compliance. You will guide cyber risk management, policy development and assurance programs while coordinating with Legal, Quality, and Operations.

The role requires deep knowledge of NIST, DFARS, ITAR, and ISO 27001, with a track record of influencing leadership and driving compliance across multiple functions. Remote work is available in some capacities.